Revised Laws of Saint Lucia (2022)

36.   Processing of sensitive personal data

The data controller may process sensitive personal data if appropriate safeguards are adopted and the processing is necessary —

  1.  

    (a)     for the purposes of exercising or performing any right or obligation which is conferred or imposed by any law in force in Saint Lucia on the data controller;

  1.  

    (b)     in order to protect the vital interests of the data subject or another person in a case where —

    1.  

      (i)     consent cannot physically or legally be given by or on behalf of the data subject, or

    1.  

      (ii)     the data controller cannot reasonably be expected to obtain the consent of the data subject;

  1.  

    (c)     in order to protect the vital interests of another person, in a case where consent by or on behalf of the data subject has been unreasonably withheld.